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IN THE CLAIMS 

Amended claims follow: 

1 . (Cuirently Amended) A method executed utilizing a computer including a 

tangible computer readable medium for prioritized network security, comprising: 

(a) identifying a set of policies, each policy having a condition associated therewith; 

(b) determining whether the conditions are met; and 

(c) activating the policies whose associated conditions are determined to be met; 

(d) wherein the conditions represent a priority of the policy; 

(e) wherein a first policy with a higher priority has a first condition associated 
therewith that is different 6n>m a second condition associated wifh a second policy 
with a lower priority such that the first policy and second policy are activated 
under different priority-related conditions; 

(f) wherem the activation of the policies includes: 

adding the poKcies to a set of a plurality of active policies, and executing 
security actions associated wifli the active policies if associated limits are met; 
and 

identifying currently executed security acticms, determining whether a 
conflict exists between Ae currently executed security acdons, and resolving any 
conflicts between Has currently executed security actions; 

(g) wherein the conditions include a time factor, the time fector including at least one 
of a timeframe, a inredetenninedtime period, and a time limit 

^20 wherein the conditions in clude a source of the p nlirift.; 

2. (Original) The metiiod as recited m claun 1, and furtiier comprising determining 
whether a user confirms tiic activation of the policies, 

3. (Original) The method as recited in claim 2. and further comprising activating the 
policies if tiie user confirms. 
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4. (Origiiial) The method as recfted in claim I, and further comprising updating the 
set of policies. 

5. (Original) The method as recited in claim 4, vrfierein the updating includes 
receiving another inactive policy, determining whether the user accepts the 
inactive policy, and adding the inactive policy to the set if the user accepts the 
inactive policy. 

6. (Cancelled) 

7. (Previously Presented) The method as recited in claun 1, and forther comprismg 
determining whether the conditions associated with the active policies arc still 
met, and de-activaling the active policies if the associated conditions arc not met 

8. (Cancelled) 

9. (Cancelled) 

10. (Cancelled) 

1 1 • (Original) The method as recited in claim 1 , wherein the conditions include a 
severity of security actions associated with the policies, 

12. (Currently Amended) A computer program product embodied on a tangible 
computer readable medium for prioritized network security, comprising: 

(a) computer code for identifying a set of policies, each policy having a condition 
associated therewith; 

(b) computer code for determining whether the conditions are met; and 

(c) computer code for activating the policies whose associated conditions ate 
determined to be met; 

(<f) wherein the conditions represent a priority of tiie policy; 
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(e) wherein a first poKcy with a higher priority has a first condition associated 

therewith that is diflFerent fiom a second condition associated with a second poUcy 
with a lower priority such that the first policy and second policy are activated 
under different priority-related conditions; 
(0 Mlierein the activation of the policies involves: 

computer code for adding the policies to a set of a plurality of active 
poUcies, and executing security actions associated with the active policies if 
associated limits afe met; and 

computer code for identifying currently executed security actions^ 
determining whether a conflict exists between the currently executed security 
actions, and resolving any conflicts between the currently executed security 
actions; 

(g) wherein the conditions include a time factor, the time fector including at least one 

of a timefiramc, a predetermined time period, and a time limit; 
0) ^^erein the conditions include a source of the noHdes 



(Original) nie computer program product as recited in claim 12, and fiirther 
comprising computer code for determining whelher a user confirms the activation 
of the policies. 

(Original) The computer program product as recited in claim 13, and fiirther 
comprising computer code for activatmg the poUdes if the user confirms. 

(Original) The computer program product as lecited in claim 12, and further 
comprising computer code for updating the set of policies. 

(Original) The computer program product as recited in claim 1 5. wherein the 
updating includes receiving another inactive poUcy, determining whether the user 
accepts the inactive poUcy, and adding the inactive poUcy to tiie set if the user 
accepts the inactive policy. 



PA6E11C6'R(»DAT8l1iU20ll6 4:51:22 PM (Eastern DayOj)litllne]'SVR:USPTO{^ 



AUG." 18. 2006 2:04PM ' ZILKA-KOTAB. PC 



NO. 3886 P. 12 



-5- 

17. (Cancelled) 

1 8. (Previously Presented) The computer program product as recited in claim 12, and 
further comprising computer code for determining whether the conditions 
associated with the active poUcies are still met, and de-activating the active 
policies if the associated conditions are not met. 

19. (CanceUed) 

20. (CanceUed) 

21. (Cancelled) 

22. (Original) TTie computer program product as recited in claim 12, wherein the 
conditions Include a severity of security actions associated with the poUcies. 

23. (CuiTcntly Amended) A system including a computer with a tangible computet 
readable medium for prioritized network security, comprising: 

(a) logic for identiftong a set of policies, eachpoUcy having a condition associated 
tiierewilh; 

(b) logic for detcnnining whether the conditions arc met; and 

(c) logic for activating the poUcies whose associated conditions are determined to be 
met; 

(d) whwein the conditions represent a priority of the policy; 

(e) wherein a &st policy with a higher priority has a first condition associated 
therewith that is different from a second condition associated with a second poUcy 
with a lower priority such that the first poUcy and second policy are activated 
under different priority-related conditions; 

if) wherein die activation of the poUcies involves: 
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logic for adding the poKcies to a set of a pluraKty of active poUcies, and 
executing security actions associated ^th the active policies if associated limits 
aiemet; and 

logic for identilying currently executed security actions, determining 
whether a conflict exists between the currently executed security actions, and 
resolving any conflicts between the currently executed securhy actions; 
wherein the conditions include a time factor, the time factor including at least 
of a timeframe, a predetermined time period, and a time limiti 
wfaerem the conditions incl ude a smirra> ihe p olir..>.g 



(g) 



one 



24. (Cancelled) 

25. (Cancelled^ 

26. (CanceUed) 

27. (CanceUed) 

28. (Cumsntiy Amended) A method executed utilizing a computer including a 
tangible computer readable medium for prioritized network security, comprising: 

(a) identi^g a set of policies, each poUcy having a condition associated therewith; 

(b) determining whether the conditions are met; and 

(c) activating the policies whose associated conditions are determined to be mc^ 

(d) wherein the conditions represent an urgency associated with an issue causing fbs 
policy to be activated; 

(e) wherem a first policy with a higher associated urgency has a first condition 
associated therewith that is different fit>m a second condition associated with a 
second poUcy with a lower associated urgency such that the first poKcy and the 
second poUcy are activated under different urgency-related conditions; 

(f) wherein the activation of the policies uicludes: 
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adding tbe policies to a set of a plurality of active policies, and executing 
security actions associated with tixe active poHcies if associated limits are met; 
and 

identifsdng cunently executed security actions, determining whether a 
conflict exists between the currently executed security actions, and resolving any 
conilicts between the currently executed security actions 
wherein the conditions include a time factor, the time fector mcluding at least one 
of a timeframe, a predetennined time perio4 and a time limiti 
^ herein the conditions inrhide a soim» nf ihe policies. 



(g) 



(a) 



29. (Cunently Amended) A method executed utilizing a computer includiAg a 

tangible computer readable medium for providmg network security, comprising: 
identifying a set of a plurality of inactive poKcies each including a security action, 
a condition for activating the policy, and a limit for triggering the security action 
iftiie policy is active; 
(b) updating the set ofinactive policies including: 
(i) receiving anotiaer mactive policy, 

Oi) detemuning whether the user accepts the inactive policy, and 
(iii) adding the inactive policy to the set if the user accepts the inactive poUcy; 
detemuning whether tiie conditions are met for the inactive policies; 
detennining whether a user confirms the activation of the inactive policies iftiie 
associated conditions are met; and 

activating the inactive policies if the user confhms, the activation includmg; 
(i) adding tiie inactive policies to a set of a pluraUty of active policies, 

determining whetiier tiie conditions associated witii flie active poKoies are 

still met, 

de-activating tiie active policies iftiie associated conditions are not met, 
and 

(iv) executing tiic security actions associated wifli tiie active poUcies iftiie 
associated conditions are met and tiie lunits are met. tiie execution of flie 
security actions including: 
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(1) identifying cutrently executed security actions, 

(2) detetmirung whether a conflict exists between tiie currently 
executed security actions, and 

(3) resolving any conflicts between tiie currently executed security 
actions; 

(f) wherein the conditions include a time fector, the time factor including at least one 

of a timeframe, a predetermined time period, and a time hmiti 
^g) wherein the conditions incl ude a .sourcft of the policie^ . 

30. (Previously Presented) The method as recited in claim 1, wherein the policies 
include low priority poHcies that are defiiult policies which do not expire. 

31. (Previously Presented) The method as recited in clahn 1, wherein the policies 
mdude medium priorily poUoies that arc valid for the predeletmined time period. 

32. (Previously Presented) The method as recited in claim 31, wherein the poKcies 
include high priority poUcies that are valid for another predetermined time period that is 
less than the predetermined time period associated with the medium priorily policies. 

33. (Previously Presented) The method as recited in daun 1. wfaerem the identifying 
the set of policies, the determining v/beHbsr the conditions are met, and the activating the 
policies are controlled locally. 
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